$ rpki-client -vvf repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft File: 781285AE1A8C595D354913D0B93F6982FCDFD898.mft (raw, json) Hash identifier: dzehIzgzQoFQh2YPVh0JdXuuZKUHJzqo9Mmro3KFcVc= Subject key identifier: CA:57:6F:D2:B0:81:A0:94:A8:95:CD:B1:A2:63:09:A4:EA:33:94:27 Authority key identifier: 78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98 Certificate issuer: /CN=781285AE1A8C595D354913D0B93F6982FCDFD898 Certificate serial: 5B40A98EA7E5F90CC34CDF71F994C65BF7BAD595 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft Manifest number: 015B Signing time: Fri 04 Apr 2025 00:01:06 +0000 Manifest this update: Thu 03 Apr 2025 23:56:06 +0000 Manifest next update: Mon 07 Apr 2025 01:46:06 +0000 Files and hashes: 1: 3130332e39312e3134382e302f32342d3234203d3e20313530393139.roa (hash: 2BdVqKJM7wkCXb7z3xWM42z8nq2M+ZXCEKBrPXEyNn4=) 2: 781285AE1A8C595D354913D0B93F6982FCDFD898.crl (hash: 8fpfxzZCQPd5gvFUDVD/wBzO1GtKVcVwLYtjGFSM+J8=) 3: 3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (hash: rVykKz8Sijcwgrjh36jl66i5jYhje07nNSzwkGxxcIo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 01:46:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:40:a9:8e:a7:e5:f9:0c:c3:4c:df:71:f9:94:c6:5b:f7:ba:d5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=781285AE1A8C595D354913D0B93F6982FCDFD898 Validity Not Before: Apr 3 23:56:06 2025 GMT Not After : Apr 7 01:46:06 2025 GMT Subject: CN=CA576FD2B081A094A895CDB1A26309A4EA339427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:bd:5d:25:8e:bd:ad:b0:d1:a4:9b:93:d1: ce:30:c5:07:1b:fb:e1:b6:d0:10:a5:fd:f0:ca:79: 65:1c:f2:7e:4a:2e:fc:5b:4f:cd:ef:39:ac:10:60: ff:da:bd:eb:30:33:4f:f1:2d:32:7b:9a:5c:9a:84: 19:6a:9b:0a:1b:72:e7:93:86:9a:f0:4a:6a:27:ae: 6d:08:5c:3d:59:ac:ee:48:b1:f7:e2:95:09:51:b1: a1:a3:21:dd:a4:b8:fe:a8:93:1c:a6:ae:b9:a5:db: 4e:dc:1f:48:50:c7:8c:fd:f5:0e:7b:00:c0:42:ef: d3:cd:b7:ce:5f:e6:56:7b:6e:35:18:db:e4:dc:43: 35:9f:3b:a4:0d:29:9d:c2:45:1b:92:0a:5c:9a:74: ba:44:c0:55:34:e0:82:24:57:04:ac:f5:f9:f8:c5: fa:38:6c:ab:4d:87:bb:4b:0d:e2:cb:e3:a7:92:46: ff:d0:0a:60:b2:db:02:f8:78:6e:7b:20:70:75:e7: 2e:1f:0b:64:ad:b8:c3:a8:a3:90:94:a6:dc:b7:7e: 1f:2b:65:f5:de:fd:eb:51:d4:cf:0a:ff:80:3c:85: e2:64:b0:ae:ad:d4:47:84:9f:e6:05:6c:34:55:49: e1:85:87:5f:b2:14:ea:8a:9c:9c:75:c7:e5:02:74: 72:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:57:6F:D2:B0:81:A0:94:A8:95:CD:B1:A2:63:09:A4:EA:33:94:27 X509v3 Authority Key Identifier: keyid:78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:3e:90:b9:ba:bd:dc:2c:d1:90:c7:a2:90:64:e3:70:89:2a: 76:7e:55:49:57:62:88:70:70:c6:97:1a:16:07:f1:df:53:4a: d2:f1:54:90:af:12:84:13:16:c7:7a:fb:7f:f2:ca:f2:ce:b8: 1b:8a:2d:19:96:ec:85:77:2c:45:15:7b:ea:d0:c8:0d:fb:8d: 27:f2:a4:8f:4d:7b:75:92:d3:3f:47:8d:e8:90:62:a1:5e:c1: 4b:5a:46:4f:ae:ac:5e:5e:91:1f:c7:16:bb:6b:c7:20:ec:e4: 94:b1:7b:73:8d:6a:c9:d4:13:21:30:92:b5:e1:e7:0e:8a:c7: 80:47:44:6b:ec:9c:0a:d7:fb:45:f8:7d:ed:e8:68:b5:83:4d: b5:e5:6d:93:ea:b1:8b:6b:7f:b0:9a:d4:1c:47:4c:11:fb:bd: 11:8b:a0:ea:57:09:16:18:15:15:e4:46:60:57:c5:a5:e1:00: fe:bb:56:52:19:6f:c9:e6:b7:63:e0:5d:9b:71:f6:dd:2f:b7: bf:94:6f:dc:e0:fe:ee:2e:98:c4:39:4a:38:c7:f4:57:ce:77: 2f:54:37:37:ea:44:b7:ec:a3:29:5e:01:a4:a1:5d:5e:3f:21: c2:82:e4:6d:71:b6:84:3a:d1:06:40:42:77:fd:a4:b3:b2:bb: 77:03:08:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW0Cpjqfl+QzDTN9x+ZTGW/e61ZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5ODJG Q0RGRDg5ODAeFw0yNTA0MDMyMzU2MDZaFw0yNTA0MDcwMTQ2MDZaMDMxMTAvBgNV BAMTKENBNTc2RkQyQjA4MUEwOTRBODk1Q0RCMUEyNjMwOUE0RUEzMzk0MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA571dJY69rbDRpJuT0c4wxQcb ++G20BCl/fDKeWUc8n5KLvxbT83vOawQYP/aveswM0/xLTJ7mlyahBlqmwobcueT hprwSmonrm0IXD1ZrO5IsffilQlRsaGjId2kuP6okxymrrml207cH0hQx4z99Q57 AMBC79PNt85f5lZ7bjUY2+TcQzWfO6QNKZ3CRRuSClyadLpEwFU04IIkVwSs9fn4 xfo4bKtNh7tLDeLL46eSRv/QCmCy2wL4eG57IHB15y4fC2StuMOoo5CUpty3fh8r ZfXe/etR1M8K/4A8heJksK6t1EeEn+YFbDRVSeGFh1+yFOqKnJx1x+UCdHJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyldv0rCBoJSolc2xomMJpOozlCcwHwYDVR0j BBgwFoAUeBKFrhqMWV01SRPQuT9pgvzf2JgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Mjc1ZmQ3Ni1lOGVlLTQ2YzgtOWQ4Mi1iNzM1YjlmNzA0MzEvMC83ODEyODVBRTFB OEM1OTVEMzU0OTEzRDBCOTNGNjk4MkZDREZEODk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5ODJGQ0RG RDg5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDI3NWZkNzYtZThlZS00NmM4LTlk ODItYjczNWI5ZjcwNDMxLzAvNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5 ODJGQ0RGRDg5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKU+kLm6vdws0ZDHopBk43CJKnZ+VUlXYohw cMaXGhYH8d9TStLxVJCvEoQTFsd6+3/yyvLOuBuKLRmW7IV3LEUVe+rQyA37jSfy pI9Ne3WS0z9HjeiQYqFewUtaRk+urF5ekR/HFrtrxyDs5JSxe3ONasnUEyEwkrXh 5w6Kx4BHRGvsnArX+0X4fe3oaLWDTbXlbZPqsYtrf7Ca1BxHTBH7vRGLoOpXCRYY FRXkRmBXxaXhAP67VlIZb8nmt2PgXZtx9t0vt7+Ub9zg/u4umMQ5SjjH9FfOdy9U NzfqRLfsoyleAaShXV4/IcKC5G1xtoQ60QZAQnf9pLOyu3cDCHA= -----END CERTIFICATE-----Generated at Sat Apr 5 17:52:23 2025 by rpki-client